CVE-2018-12633-TPLink-Auth-Bypass

CVE-2018-12633-TPLink-Auth-Bypass A technical case study and exploitation analysis of the Authentication Bypass vulnerability in TP-Link TL-WR840N firmware CVE-2018-12633. Vulnerability Analysis: TP-Link TL-WR840N Authentication Bypass CVE-2018-12633 ⚠️ Disclaimer: This repository is for...

CVE-2020-10882

Reference links https://www.zerodayinitiative.com/blog/2020/4/6/exploiting-the-tp-link-archer-c7-at-pwn2own-tokyo https://github.com/rdomanski/ExploitsandAdvisories/blob/master/advisories/Pwn2Own/Tokyo2019/laobomb.md...

CVE-2021-41653

CVE-2021-41653 TP-Link TL-WR840N EU v5 Remote Code Execution Reference: https://k4m1ll0.com/cve-2021-41653.html...

CVE-2021-27246_Pwn2Own2020

Pwn2Own 2020 Tokyo Edition - TPlink exploit Here is the files used to exploit the TPlink Archer router during the Pwn2Own 2020 Tokyo. The vulnerability has CVE-2021-27246 number. You can check blogpost on the synacktiv website for the details...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 Authenticated RCE Through Malicious Configuration File Upload CVE-2018-19537 Description An authenticated remote code execution RCE vulnerability exists in all published firmware versions for the TP-Link Archer C5 router. By uploading a maliciously crafted configuration file, an...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 TP-Link Archer C9 के लिए POC - एडमिन पासवर्ड रीसेट और RCE CVE-2017-11519 लेखन यहाँ देखें https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

TP-Link-defaults

TP-Link-defaults Python script for trying default passwords for some TP-Link Hotspots Inspired by Usage root@kitploit: usage: scan.py -h -p -t TIMEOUT Python script for trying default passwords for some TP-Link Hotspots optional arguments: -h, --help show this help message and exit -p, --print-al...

CVE-2021-4045

TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE CVE-2021-4045 🔐 "PWNTAPO: Unveiling Command Injection in TP-Link Tapo C200 Cameras = v1.1.16 Build 211209" 🔓 Read about the exploit from exploit db This is a command injection vulnerability that affect all TP-Link Tapo c200 camera firmware...

CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-Link Archer C20 v6 web management interface. BPA WAN configuration values are passed to system without adequate neutralization, allowing an authenticated administrator on the adjacent network to execute commands as root. Discovered and...

CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP Buffer Overflow RCE Overview Stack-based buffer overflow in CWMP TR-069 leading to remote code execution. Field| Value ---|--- Product| TP-Link AX10, AX1500 Affected| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC...

CVE-2026-11834

CVE-2026-11834 PoC TP-Link DHCP Option 66 Unauthenticated RCE CVE-2026-11834 Overview A command injection vulnerability CWE-78 in the DHCP Option 66 "TFTP Server Name" handling of TP-Link router firmware allows an unauthenticated attacker on the same network segment to execute arbitrary commands ...

CVE-2026-76651 Pre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841N

A buffer overflow vulnerability exists in the embedded HTTP service in TL-WR841N v14 when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter may allow a remote unauthenticated attacker to submit a crafted request that corrupts memory by...

CVE-2026-76651

A buffer overflow in the embedded HTTP service of the TP-Link TL-WR841N v14 is triggered when processing multipart/form-data requests. Insufficient validation of an attacker-controlled boundary parameter allows a remote, unauthenticated attacker from the adjacent network to corrupt memory beyond ...

CVE-2026-76649

TP-Link TL-WR841N v14 is affected by a pre-authentication NULL pointer dereference in its UPnP service when processing SOAP action requests. A specially crafted SOAP request containing unexpected XML content causes the UPnP daemon to terminate, resulting in a denial-of-service condition that pers...

EUVD-2026-67447

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-76784 Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

EUVD-2026-66641

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...

CVE-2026-76784

Multiple TP-Link Kasa smart home devices are affected by insufficient cryptographic protections in the local device communication protocol. An attacker on an adjacent network can intercept, replay, or forge locally exchanged control messages, leading to unauthorized device control , state manipul...